1   1  /  1  页   跳转

大家来分析BAT清楚病毒方式

大家来分析BAT清楚病毒方式

@echo off
echo 解决隐藏文件无法显示
echo Windows Registry Editor Version 5.00 >1.reg
echo [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL]>>1.reg
echo "RegPath"="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced">>1.reg
echo "Text"="@shell32.dll,-30500">>1.reg
echo "Type"="radio">>1.reg
echo "CheckedValue"=dword:00000001>>1.reg
regedit /s 1.reg
del /s 1.reg
echo 结束病毒进程
taskkill /f /im conime.exe
taskkill /f /im sovhost.exe
taskkill /f /im rose.exe
taskkill /f /im sxs.exe
taskkill /f /im motepad.exe
taskkill /f /im dmadmin.exe
taskkill /f /im TIMPlatform.exe
taskkill /f /im dmremote.exe
taskkill /f /im FuckJacks.exe
taskkill /f /im smss.exe
taskkill /f /im mshosts.exe
taskkill /f /im j3.exe
taskkill /f /im 0.exe
taskkill /f /im 7sy.exe
taskkill /f /im exerouter.exe
taskkill /f /im 5sy.exe
taskkill /f /im 3sy.exe
taskkill /f /im rund1132.exe
taskkill /f /im 2sy.exe
taskkill /f /im 1sy.exe
taskkill /f /im 0.exe
taskkill /f /im rundl132.exe
taskkill /f /im logo_1.exe
taskkill /f /im logo1_.exe
taskkill /f /im 4sy.exe
taskkill /f /im 6sy.exe
taskkill /f /im kill.exe
taskkill /f /im GameSetup.exe
taskkill /f /im mhs2.exe
taskkill /f /im zts2.exe

echo 解决病毒改换过得注册表
echo Windows Registry Editor Version 5.00 >fix.reg
echo [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL]>>fix.reg
echo "CheckedValue"=dword:00000001>>fix.reg
regedit /s fix.reg
del /s fix.reg
最后编辑2007-02-06 13:49:46
分享到:
gototop
 

echo 删除启动病毒文件
reg delete HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run  /v "Synchronization Manager" /f
reg delete HKEY_USERS\S-1-5-21-1757981266-2111687655-682003330-500\Software\Microsoft\Windows\CurrentVersion\Run /v FuckJacks /f
reg delete HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v conime /f
reg delete HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v sovhost /f
reg delete HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v rose /f
reg delete HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v sxs /f
reg delete HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v motepad /f
reg delete HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v dmadmin /f
reg delete HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v TIMPlatform /f
reg delete HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v dmremote /f
reg delete HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v FuckJacks /f
reg delete HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v smss /f
reg delete HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v mshosts /f
reg delete HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v j3 /f
reg delete HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v exerouter /f
reg delete HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v rund1132 /f
reg delete HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v rundl132 /f
reg delete HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v logo_1 /f
reg delete HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v logo1_ /f
reg delete HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v 0sy /f
reg delete HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v 1sy /f
reg delete HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v 2sy /f
reg delete HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v 3sy /f
reg delete HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v 4sy /f
reg delete HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v 5sy /f
reg delete HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v 6sy /f
reg delete HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v 7sy /f
reg delete HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v kill /f
reg delete HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v FuckJacks /f
reg delete HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v userinit /f
reg delete HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v svohost /f
reg delete HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v mhs2 /f
reg delete HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v zts2 /f
reg delete HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v GameSetup /f
reg delete HKEY_USERS\S-1-5-21-1757981266-2111687655-682003330-500\Software\Microsoft\Windows\CurrentVersion\Run /v FuckJacks /f
pause

@echo off
echo 以下杀除有关RECYCLER中带的病毒
attrib -a -s -r -h c:\RECYCLER\*.*
del /s /q /f /a c:\RECYCLER
attrib -a -s -r -h d:\RECYCLER\*.*
del /s /q /f /a d:\RECYCLER
attrib -a -s -r -h e:\RECYCLER\*.*
del /s /q /f /a e:\RECYCLER
attrib -a -s -r -h f:\RECYCLER\*.*
del /s /q /f /a f:\RECYCLER
attrib -a -s -r -h g:\RECYCLER\*.*
del /s /q /f /a g:\RECYCLER
md E:\RECYCLER
md E:\RECYCLER\病毒免疫程序请不要删除!..\
md c:\RECYCLER
md c:\RECYCLER\病毒免疫程序请不要删除!..\
md D:\RECYCLER
md D:\RECYCLER\病毒免疫程序请不要删除!..\
md f:\RECYCLER
md f:\RECYCLER\病毒免疫程序请不要删除!..\
md g:\RECYCLER
md g:\RECYCLER\病毒免疫程序请不要删除!..\


@echo 开始删除各盘病毒文件
attrib -a -s -r -h %windir%\system32\sxs.exe
del /s /q /f /a %windir%\system32\sxs.exe /s /q
attrib -a -s -r -h %windir%\system32\sovhost.exe
del /s /q /f /a %windir%\system32\sovhost.exe /s /q
attrib -a -s -r -h c:\sxs.exe
del /s /q /f /a c:\sxs.exe /s /q
attrib -a -s -r -h c:\autorun.inf
del /s /q /f /a c:\autorun.inf /s /q
attrib -a -s -r -h D:\sxs.exe
del /s /q /f /a D:\sxs.exe /s /q
attrib -a -s -r -h D:\autorun.inf
del /s /q /f /a D:\autorun.inf /s /q
attrib -a -s -r -h e:\sxs.exe
del /s /q /f /a e:\sxs.exe /s /q
attrib -a -s -r -h e:\autorun.inf
del /s /q /f /a e:\autorun.inf
attrib -a -s -r -h e:\sss.exe
del /s /q /f /a e:\sss.exe
@echo off
attrib -a -s -r -h %windows%\system32\FuckJacks.exe
attrib -a -s -r -h %windows%\system32\Dd11.exe
attrib -a -s -r -h %system%\drivers\spoclsv.exe
attrib -a -s -r -h %system%\FuckJacks.exe
attrib -a -s -r -h %system%\drivers\spoclsv.exe
attrib -a -s -r -h %windows%\sytem32\npptools.dll
attrib -a -s -r -h c:\windows\Logo1_.exe
attrib -a -s -r -h c:\windows\Logo_1.exe
attrib -a -s -r -h c:\windows\rundl132.exe
attrib -a -s -r -h c:\windows\0Sy.exe
attrib -a -s -r -h c:\windows\vDll.dll
attrib -a -s -r -h c:\windows\1Sy.exe
attrib -a -s -r -h c:\windows\2Sy.exe
attrib -a -s -r -h c:\windows\rundll32.exe
attrib -a -s -r -h c:\windows\3Sy.exe
attrib -a -s -r -h c:\windows\5Sy.exe
attrib -a -s -r -h c:\windows\0.exe
attrib -a -s -r -h c:\windows\7sy.exe
attrib -a -s -r -h c:\windows\j3.exe
attrib -a -s -r -h c:\windows\mshosts.exe
attrib -a -s -r -h c:\windows\1.com
attrib -a -s -r -h c:\windows\exerouter.exe
attrib -a -s -r -h c:\windows\EXP10RER.com
attrib -a -s -r -h c:\windows\finders.com
attrib -a -s -r -h c:\windows\Shell.sys
attrib -a -s -r -h c:\windows\smss.exe
attrib -a -s -r -h c:\windows\kill.exe
attrib -a -s -r -h c:\windows\sws.dll
attrib -a -s -r -h c:\windows\sws32.dll
attrib -a -s -r -h c:\windows\tool
attrib -a -s -r -h c:\windows\tool2005
attrib -a -s -r -h c:\windows\tool2006
attrib -a -s -r -h c:\windows\system32\RpcS.dll
attrib -a -s -r -h c:\windows\system32\Logo1_.exe
attrib -a -s -r -h c:\windows\system32\Logo_1.exe
attrib -a -s -r -h c:\windows\system32\rundl132.exe
attrib -a -s -r -h c:\windows\system32\0Sy.exe
attrib -a -s -r -h c:\windows\system32\vDll.dll
attrib -a -s -r -h c:\windows\system32\1Sy.exe
attrib -a -s -r -h c:\windows\system32\2Sy.exe
attrib -a -s -r -h c:\windows\system32\rundll32.exe
attrib -a -s -r -h c:\windows\system32\3Sy.exe
attrib -a -s -r -h c:\windows\system32\5Sy.exe
attrib -a -s -r -h c:\windows\system32\0.exe
attrib -a -s -r -h c:\windows\system32\7sy.exe
attrib -a -s -r -h c:\windows\system32\j3.exe
attrib -a -s -r -h c:\windows\system32\mshosts.exe
attrib -a -s -r -h c:\windows\system32\1.com
attrib -a -s -r -h c:\windows\system32\exerouter.exe
attrib -a -s -r -h c:\windows\system32\EXP10RER.com
attrib -a -s -r -h c:\windows\system32\finders.com
attrib -a -s -r -h c:\windows\system32\Shell.sys
attrib -a -s -r -h c:\windows\system32\smss.exe
attrib -a -s -r -h c:\windows\system32\kill.exe
attrib -a -s -r -h c:\windows\system32\sws.dll
attrib -a -s -r -h c:\windows\system32\sws32.dll
attrib -a -s -r -h c:\windows\system32\tool
attrib -a -s -r -h c:\windows\system32\tool2005
attrib -a -s -r -h c:\windows\system32\tool2006
attrib -a -s -r -h c:\windows\system32\packet.dll
attrib -a -s -r -h c:\windows\system32\pthreadVC.dll
attrib -a -s -r -h c:\windows\system32\wpcap.dll
attrib -a -s -r -h c:\windows\system32\drivers\npf.sys
exit
gototop
 




@echo off
del /s /q /f /a %windows%\system32\FuckJacks.exe
del /s /q /f /a %windows%\system32\Dd11.exe
del /s /q /f /a %SYSEM%\FuckJacks.exe
del /s /q /f /a %SYSEM%\spoclsv.exe
del /s /q /f /a c:\windows\Logo1_.exe
del /s /q /f /a c:\windows\Logo_1.exe
del /s /q /f /a c:\windows\rundl132.exe
del /s /q /f /a c:\windows\0Sy.exe
del /s /q /f /a c:\windows\vDll.dll
del /s /q /f /a c:\windows\1Sy.exe
del /s /q /f /a c:\windows\2Sy.exe
del /s /q /f /a c:\windows\rundll32.exe
del /s /q /f /a c:\windows\3Sy.exe
del /s /q /f /a c:\windows\5Sy.exe
del /s /q /f /a c:\windows\0.exe
del /s /q /f /a c:\windows\7sy.exe
del /s /q /f /a c:\windows\j3.exe
del /s /q /f /a c:\windows\mshosts.exe
del /s /q /f /a c:\windows\1.com
del /s /q /f /a c:\windows\exerouter.exe
del /s /q /f /a c:\windows\EXP10RER.com
del /s /q /f /a c:\windows\finders.com
del /s /q /f /a c:\windows\Shell.sys
del /s /q /f /a c:\windows\smss.exe
del /s /q /f /a c:\windows\kill.exe
del /s /q /f /a c:\windows\sws.dll
del /s /q /f /a c:\windows\sws32.dll
del /s /q /f /a c:\windows\tool
del /s /q /f /a c:\windows\tool2005
del /s /q /f /a c:\windows\tool2006
del /s /q /f /a c:\windows\system32\RpcS.dll
del /s /q /f /a c:\windows\system32\Logo1_.exe
del /s /q /f /a c:\windows\system32\Logo_1.exe
del /s /q /f /a c:\windows\system32\rundl132.exe
del /s /q /f /a c:\windows\system32\0Sy.exe
del /s /q /f /a c:\windows\system32\vDll.dll
del /s /q /f /a c:\windows\system32\1Sy.exe
del /s /q /f /a c:\windows\system32\2Sy.exe
del /s /q /f /a c:\windows\system32\rundll32.exe
del /s /q /f /a c:\windows\system32\3Sy.exe
del /s /q /f /a c:\windows\system32\5Sy.exe
del /s /q /f /a c:\windows\system32\0.exe
del /s /q /f /a c:\windows\system32\7sy.exe
del /s /q /f /a c:\windows\system32\j3.exe
del /s /q /f /a c:\windows\system32\mshosts.exe
del /s /q /f /a c:\windows\system32\1.com
del /s /q /f /a c:\windows\system32\exerouter.exe
del /s /q /f /a c:\windows\system32\EXP10RER.com
del /s /q /f /a c:\windows\system32\finders.com
del /s /q /f /a c:\windows\system32\Shell.sys
del /s /q /f /a c:\windows\system32\smss.exe
del /s /q /f /a c:\windows\system32\kill.exe
del /s /q /f /a c:\windows\system32\sws.dll
del /s /q /f /a c:\windows\system32\sws32.dll
del /s /q /f /a c:\windows\system32\tool
del /s /q /f /a c:\windows\system32\tool2005
del /s /q /f /a c:\windows\system32\tool2006
del /s /q /f /a c:\windows\system32\packet.dll
del /s /q /f /a c:\windows\system32\pthreadVC.dll
del /s /q /f /a c:\windows\system32\wpcap.dll
del /s /q /f /a c:\windows\system32\drivers\npf.sys
del /s /q /f /a %system%\drivers\spoclsv.exe
del /s /q /f /a %windows%\sytem32\npptools.dll
del /s /q /f /a
del /s /q /f /a
del /s /q /f /a

echo 加免疫补丁
@echo off
echo > %windows%\system32\FuckJacks.exe
echo > %windows%\system32\Dd11.exe
echo > %SYSEM%\spoclsv.exe
echo > %SYSEM%\FuckJacks.exe
echo > c:\windows\Logo1_.exe
echo > c:\windows\Logo_1.exe
echo > c:\windows\rundl132.exe
echo > c:\windows\0Sy.exe
echo > c:\windows\vDll.dll
echo > c:\windows\1Sy.exe
echo > c:\windows\2Sy.exe
echo > c:\windows\rundll32.exe
echo > c:\windows\3Sy.exe
echo > c:\windows\5Sy.exe
echo > c:\windows\0.exe
echo > c:\windows\7sy.exe
echo > c:\windows\j3.exe
echo > c:\windows\mshosts.exe
echo > c:\windows\1.com
echo > c:\windows\exerouter.exe
echo > c:\windows\EXP10RER.com
echo > c:\windows\finders.com
echo > c:\windows\Shell.sys
echo > c:\windows\smss.exe
echo > c:\windows\kill.exe
echo > c:\windows\sws.dll
echo > c:\windows\sws32.dll
echo > c:\windows\tool
echo > c:\windows\tool2005
echo > c:\windows\tool2006
echo > c:\windows\system32\RpcS.dll
echo > c:\windows\system32\Logo1_.exe
echo > c:\windows\system32\Logo_1.exe

echo > c:\windows\system32\rundl132.exe
echo > c:\windows\system32\0Sy.exe
echo > c:\windows\system32\vDll.dll
echo > c:\windows\system32\1Sy.exe
echo > c:\windows\system32\2Sy.exe
echo > c:\windows\system32\rundll32.exe
echo > c:\windows\system32\3Sy.exe
echo > c:\windows\system32\5Sy.exe
echo > c:\windows\system32\0.exe
echo > c:\windows\system32\7sy.exe
echo > c:\windows\system32\j3.exe
echo > c:\windows\system32\mshosts.exe
echo > c:\windows\system32\1.com
echo > c:\windows\system32\exerouter.exe
echo > c:\windows\system32\EXP10RER.com
echo > c:\windows\system32\finders.com
echo > c:\windows\system32\Shell.sys
echo > c:\windows\system32\smss.exe
echo > c:\windows\system32\kill.exe
echo > c:\windows\system32\sws.dll
echo > c:\windows\system32\sws32.dll
echo > c:\windows\system32\tool
echo > c:\windows\system32\tool2005
echo > c:\windows\system32\tool2006
echo > c:\windows\system32\packet.dll
echo > c:\windows\system32\pthreadVC.dll
echo > c:\windows\system32\wpcap.dll
echo > c:\windows\system32\drivers\npf.sys
echo > %system%\drivers\spoclsv.exe
echo > %windows%\sytem32\npptools.dll


attrib +a +s +r +h %windows%\system32\FuckJacks.exe
attrib +a +s +r +h %windows%\system32\Dd11.exe
attrib +a +s +r +h %SYSEM%\spoclsv.exe
attrib +a +s +r +h %SYSEM%\FuckJacks.exe
attrib +a +s +r +h c:\windows\Logo1_.exe
attrib +a +s +r +h c:\windows\Logo_1.exe
attrib +a +s +r +h c:\windows\rundl132.exe
attrib +a +s +r +h c:\windows\0Sy.exe
attrib +a +s +r +h c:\windows\vDll.dll
attrib +a +s +r +h c:\windows\1Sy.exe
attrib +a +s +r +h c:\windows\2Sy.exe
attrib +a +s +r +h c:\windows\rundll32.exe
attrib +a +s +r +h c:\windows\3Sy.exe
attrib +a +s +r +h c:\windows\5Sy.exe
attrib +a +s +r +h c:\windows\1.com
attrib +a +s +r +h c:\windows\exerouter.exe
attrib +a +s +r +h c:\windows\EXP10RER.com
attrib +a +s +r +h c:\windows\finders.com
attrib +a +s +r +h c:\windows\Shell.sys
attrib +a +s +r +h c:\windows\smss.exe
attrib +a +s +r +h c:\windows\kill.exe
attrib +a +s +r +h c:\windows\sws.dll
attrib +a +s +r +h c:\windows\sws32.dll
attrib +a +s +r +h c:\windows\7Sy.exe
attrib +a +s +r +h c:\windows\0.exe
attrib +a +s +r +h c:\windows\j3.exe
attrib +a +s +r +h c:\windows\mshosts.exe
attrib +a +s +r +h c:\windows\tool
attrib +a +s +r +h c:\windows\tool2005
attrib +a +s +r +h c:\windows\tool2006
attrib +a +s +r +h c:\windows\system32\Logo1_.exe
attrib +a +s +r +h c:\windows\system32\Logo_1.exe
attrib +a +s +r +h c:\windows\system32\rundl132.exe
attrib +a +s +r +h c:\windows\system32\0Sy.exe
attrib +a +s +r +h c:\windows\system32\vDll.dll
attrib +a +s +r +h c:\windows\system32\1Sy.exe
attrib +a +s +r +h c:\windows\system32\2Sy.exe
attrib +a +s +r +h c:\windows\system32\rundll32.exe
attrib +a +s +r +h c:\windows\system32\3Sy.exe
attrib +a +s +r +h c:\windows\system32\5Sy.exe
attrib +a +s +r +h c:\windows\system32\1.com
attrib +a +s +r +h c:\windows\system32\exerouter.exe
attrib +a +s +r +h c:\windows\system32\EXP10RER.com
attrib +a +s +r +h c:\windows\system32\finders.com
attrib +a +s +r +h c:\windows\system32\Shell.sys
attrib +a +s +r +h c:\windows\system32\smss.exe
attrib +a +s +r +h c:\windows\system32\kill.exe
attrib +a +s +r +h c:\windows\system32\sws.dll
attrib +a +s +r +h c:\windows\system32\sws32.dll
attrib +a +s +r +h c:\windows\system32\7Sy.exe
attrib +a +s +r +h c:\windows\system32\0.exe
attrib +a +s +r +h c:\windows\system32\j3.exe
attrib +a +s +r +h c:\windows\mshosts.exe
attrib +a +s +r +h c:\windows\system32\tool
attrib +a +s +r +h c:\windows\system32\tool2005
attrib +a +s +r +h c:\windows\system32\tool2006
attrib +a +s +r +h c:\windows\system32\RpcS.dll
attrib +a +s +r +h c:\windows\system32\packet.dll
attrib +a +s +r +h c:\windows\system32\pthreadVC.dll
attrib +a +s +r +h c:\windows\system32\wpcap.dll
attrib +a +s +r +h c:\windows\system32\drivers\npf.sys
attrib +a +s +r +h %system%\drivers\spoclsv.exe
attrib +a +s +r +h %windows%\sytem32\npptools.dll
attrib +a +s +r +h
gototop
 





attrib -s -a -r -h c:\MaxBak\*.*
del /s /q /f /a c:\MaxBak
md c:\MaxBak
md c:\MaxBak\病毒免疫程序请不要删除其实就是不让一切文件写入!..\
attrib -a -s -r -h c:\update.exe
del /s /q /f /a c:\update.exe
attrib -s -a -h -r c:\*.*   
del /s /q /f /a c:\~1
md c:\~1
md c:\~1\病毒免疫程序请不要删除其实就是不让一切文件写入!..\
attrib -s -a -h -r c:\MaxBak\*.*
del /s /q /f /a c:\MaxBak\*.*
attrib -s -a -r -h e:\MaxBak\*.*
del /s /q /f /a e:\MaxBak
md e:\MaxBak
md E:\MaxBak\病毒免疫程序请不要删除其实就是不让一切文件写入!..\
attrib -a -s -r -h e:\update.exe
del /s /q /f /a e:\update.exe
attrib -s -a -h -r e:\*.*   
del /s /q /f /a e:\~1
md e:\~1
md e:\~1\病毒免疫程序请不要删除其实就是不让一切文件写入!..\
attrib -s -a -h -r e:\MaxBak\*.*
del /s /q /f /a e:\MaxBak\*.*
attrib -s -a -r -h d:\MaxBak\*.*
del /s /q /f /a d:\MaxBak
md d:\MaxBak
md d:\MaxBak\病毒免疫程序请不要删除其实就是不让一切文件写入!..\
attrib -a -s -r -h d:\update.exe
del /s /q /f /a d:\update.exe
attrib -s -a -h -r d:\*.*   
del /s /q /f /a d:\~1
md d:\~1
md d:\~1\病毒免疫程序请不要删除其实就是不让一切文件写入!..\
attrib -s -a -h -r d:\MaxBak\*.*
del /s /q /f /a d:\MaxBak\*.*
attrib -s -a -r -h f:\MaxBak\*.*
del /s /q /f /a f:\MaxBak
md f:\MaxBak
md f:\MaxBak\病毒免疫程序请不要删除其实就是不让一切文件写入!..\
attrib -a -s -r -h f:\update.exe
del /s /q /f /a f:\update.exe
attrib -s -a -h -r f:\*.*   
del /s /q /f /a f:\~1
md f:\~1
md f:\~1\病毒免疫程序请不要删除其实就是不让一切文件写入!..\
attrib -s -a -h -r f:\MaxBak\*.*
del /s /q /f /a f:\MaxBak\*.*
attrib -s -a -r -h g:\MaxBak\*.*
del /s /q /f /a g:\MaxBak
md g:\MaxBak
md g:\MaxBak\病毒免疫程序请不要删除其实就是不让一切文件写入!..\
attrib -a -s -r -h g:\update.exe
del /s /q /f /a g:\update.exe
attrib -s -a -h -r g:\*.*   
del /s /q /f /a g:\~1
md g:\~1
md g:\~1\病毒免疫程序请不要删除其实就是不让一切文件写入!..\
attrib -s -a -h -r g:\MaxBak\*.*
del /s /q /f /a g:\MaxBak\*.*

attrib -s -a -h -r e:\setup.exe
del /s /q /f /a e:\setup.exe
attrib -a -s -r -h
del /s /q /f /a e:\autorun.inf /s /q
attrib -a -s -r -h f:\sxs.exe
del /s /q /f /a f:\sxs.exe /s /q
attrib -a -s -r -h f:\autorun.inf
del /s /q /f /a f:\autorun.inf /s /q
attrib -a -s -r -h g:\sxs.exe
del /s /q /f /a g:\sxs.exe /s /q
attrib -a -s -r -h g:\autorun.inf
del /s /q /f /a g:\autorun.inf /s /q
attrib -a -s -r -h c:\setup.exe
del /s /q /f /a c:\setup.exe
attrib -a -s -r -h D:\setup.exe
del /s /q /f /a D:\setup.exe
attrib -a -s -r -h E:\setup.exe
del /s /q /f /a E:\setup.exe
attrib -a -s -r -h F:\setup.exe
del /s /q /f /a F:\setup.exe
attrib -a -s -r -h G:\setup.exe
del /s /q /f /a G:\setup.exe
del /s /q /f /a C:\WINDOWS\system32\lbrow.exe
attrib -a -s -r -h c:\windows\system32\npptools.dll
del /s /q /f /a c:\windows\system32\npptools.dll
@echo 开始删除各盘病毒文件  病毒库文件你可以自己进行编写可以把现在杀度软件知道的病毒入进去。
attrib -a -s -r -h %windir%\system32\sxs.exe
del /s /q /f /a %windir%\system32\sxs.exe /s /q
attrib -a -s -r -h %windir%\system32\sovhost.exe
del /s /q /f /a %windir%\system32\sovhost.exe /s /q
attrib -a -s -r -h c:\sxs.exe
del /s /q /f /a c:\sxs.exe /s /q
attrib -a -s -r -h c:\autorun.inf
del /s /q /f /a c:\autorun.inf /s /q
attrib -a -s -r -h D:\sxs.exe
del /s /q /f /a D:\sxs.exe /s /q
attrib -a -s -r -h D:\autorun.inf
del /s /q /f /a D:\autorun.inf /s /q
attrib -a -s -r -h e:\sxs.exe
del /s /q /f /a e:\sxs.exe /s /q
attrib -a -s -r -h e:\autorun.inf
del /s /q /f /a e:\autorun.inf /s /q
attrib -a -s -r -h f:\sxs.exe
del /s /q /f /a f:\sxs.exe /s /q
attrib -a -s -r -h f:\autorun.inf
del /s /q /f /a f:\autorun.inf /s /q
attrid -a -s -r -h g:\sxs.exe
del /s /q /f /a g:\sxs.exe /s /q
attrib -a -s -r -h g:\autorun.inf
del /s /q /f /a g:\autorun.inf /s /q
attrib -a -s -r -h c:\setup.exe
del /s /q /f /a c:\setup.exe
attrib -a -s -r -h D:\setup.exe
del /s /q /f /a D:\setup.exe
attrib -a -s -r -h E:\setup.exe
del /s /q /f /a E:\setup.exe
attrid -a -s -r -h F:\setup.exe
del /s /q /f /a F:\setup.exe
attrib -a -s -r -h G:\setup.exe
del /s /q /f /a G:\setup.exe
del /s /q /f /a C:\WINDOWS\system32\lbrow.exe
@echo off

attrib -a -s -r -h c:\autorun.inf
del /s /q /f /a c:\autorun.inf
attrib -a -s -r -h c:\sxs.exe
del /s /q /f /a c:\sxs.exe
md c:\Autorun.inf
md c:\Autorun.inf\病毒免疫程序请不要删除其实就是不让一切文件写入!..\
attrib +a +s +r +h c:\Autorun.inf
@echo C盘免疫完成
pause

attrib -a -s -r -h d:\autorun.inf
del /s /q /f /a d:\autorun.inf
attrib -a -s -r -h d:\sxs.exe
del /s /q /f /a d:\sxs.exe
md d:\Autorun.inf
md d:\Autorun.inf\病毒免疫程序请不要删除其实就是不让一切文件写入!..\
attrib +a +s +r +h d:\Autorun.inf
@echo D盘免疫完成

attrib -a -s -r -h e:\autorun.inf
del /s /q /f /a e:\autorun.inf
attrib -a -s -r -h e:\sxs.exe
del /s /q /f /a e:\sxs.exe
md e:\Autorun.inf
md e:\Autorun.inf\病毒免疫程序请不要删除其实就是不让一切文件写入!..\
attrib +a +s +r +h e:\Autorun.inf
@echo E盘免疫完成

attrib -a -s -r -h f:\autorun.inf
del /s /q /f /a f:\autorun.inf
attrib -a -s -r -h f:\sxs.exe
del /s /q /f /a f:\sxs.exe
md f:\Autorun.inf
md f:\Autorun.inf\病毒免疫程序请不要删除其实就是不让一切文件写入!..\
attrib +a +s +r +h f:\Autorun.inf
@echo f盘免疫完成


attrib -a -s -r -h g:\autorun.inf
del /s /q /f /a g:\autorun.inf
attrib -a -s -r -h g:\sxs.exe
del /s /q /f /a g:\sxs.exe
md g:\Autorun.inf
md g:\Autorun.inf\病毒免疫程序请不要删除其实就是不让一切文件写入!..\
attrib +a +s +r +h g:\Autorun.inf
@echo g盘免疫完成
pause

@echo*********执行本程序能杀威金,熊猫烧香,魔波,等等小病毒*********
@echo *********以完成杀毒,加免疫补丁*********
@echo *********病毒文件可以自己更新找一些杀毒厂商去找到病毒名称进行处理*********
@echo 实验一下看看好用么:)我们这里反正很好用不知道你们那里了
@echo 哈哈哈自己看看吧已上就是这些希望对你有一定的帮助OK!!!!!!!!!!!!!!!!!!!!!!!!
pause
gototop
 

taskkill /f /im smss.exe
gototop
 

taskkill /f /im FuckJacks.exe
echo > %system%\drivers\spoclsv.exe
熊猫变种那么多你就收了2个进程名?
gototop
 

根本看不懂吗~~~
gototop
 
1   1  /  1  页   跳转
页面顶部
Powered by Discuz!NT